Red Hat Security Advisory

RHSA-2010:0490

cups security update

Released 2010-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Desktop version 3 cups-1:1.1.17-13.3.65, cups-1:1.1.17-13.3.65.i386, cups-devel-1:1.1.17-13.3.65 +3
Red Hat Enterprise Linux (v. 5 server) cups-1:1.3.7-18.el5_5.4, cups-1:1.3.7-18.el5_5.4.i386, cups-1:1.3.7-18.el5_5.4.ia64 +13
Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.65, cups-1:1.1.17-13.3.65.i386, cups-1:1.1.17-13.3.65.ia64 +9
Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.6, cups-1:1.1.22-0.rc1.9.32.el4_8.6.i386, cups-1:1.1.22-0.rc1.9.32.el4_8.6.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.3.7-18.el5_5.4, cups-1:1.3.7-18.el5_5.4.i386, cups-devel-1:1.3.7-18.el5_5.4.i386 +4
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.3.7-18.el5_5.4, cups-devel-1:1.3.7-18.el5_5.4, cups-devel-1:1.3.7-18.el5_5.4.i386
Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.6, cups-1:1.1.22-0.rc1.9.32.el4_8.6.i386, cups-devel-1:1.1.22-0.rc1.9.32.el4_8.6 +3
Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.65, cups-1:1.1.17-13.3.65.i386, cups-1:1.1.17-13.3.65.ia64 +6
Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.6, cups-1:1.1.22-0.rc1.9.32.el4_8.6.i386, cups-1:1.1.22-0.rc1.9.32.el4_8.6.ia64 +6
Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.65, cups-1:1.1.17-13.3.65.i386, cups-1:1.1.17-13.3.65.ia64 +6
Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.6, cups-1:1.1.22-0.rc1.9.32.el4_8.6.i386, cups-1:1.1.22-0.rc1.9.32.el4_8.6.ia64 +6

Fixes 3 records

TI-2010-00514 CVE-2010-0542 · GHSA-cwfp-wwxr-hhq6

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS…

LOW 37

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04129 Published 2010-06-21 Fixed CWE-264

TI-2010-01674 CVE-2010-1748 · GHSA-vcrj-62jj-6wf5

The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before…

LOW 29

The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06468 Published 2010-06-17 Fixed CWE-119

TI-2010-00512 CVE-2010-0540 · GHSA-hfwh-42mw-69v8

Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before…

LOW 29

Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authent…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01275 Published 2010-06-17 Fixed CWE-352